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(57) Abstract: A method and device/terminal are disclosed for the positive identification ofSan individual which finds particular use 
for the secure purchasing of goods orservices over a visual medium such as television, the Internet and EFTPOSsystems. The tenni- 
nal is a point-of-sale tenmnal (6) which includes akeyboard (7), a screen (8), a fingerprint reader (9), a smart card readerassembly 
(10) and a printhead assembly incorporated within the card readerassembly (10). The operating software of the tenmnal (6) includes 
code todecrypt encrypted information read from the smart card (4). An individualwishing to undertake a secure financial transaction 
first obtains a smart card(4) which incorporates encrypted biometnc data and financial data of thatindividual. At the point of intended 
purchase, the card (4) is placed in thereader assembly (10) of the terminal (6). The account details and encryptedbiometric data are 
read by the terminal (6). The appropriate fingerprint of theindividual is then taken at the fingerprint leader (9) of the terminal (6) 
fromwhich the encryption key is determined The encrypted fingerprint data leadfiom the card (4) is then decrypted using the en- 
ctyption key just detenninedand the thns<decoded fingerprint data from the card (4) is compared with thefingeiprint data obtained at 
the terminal (6). If the tbos-iead fingeipiint data isidentica] with that decoded fix>m the card (4), identification is deemed positiveand 
the financial transaction proceeds. 
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TITLE: SECURE BIOWIETRIC LOOP 

THIS INVENTION relates to the provision of a secure method for the positive 
Identification of an individual, particularly, but not exclusively, as a means for 
the authentication of a purchase of goods or services or for cash withdrawals 
oyer a telecommunication medium. The invention finds particular, but not 
5 exclusive, use as a means for secure purchasing of goodis or sen/ices over a 
visual medium such as television or other visual display medium or the Internet 
or as part of an EFTPOS system (electronic funds transfer at point of sale). 
However, the invention is not to be regarded as limited to such applications. 

The advertising of goods and services over media such as television and the 
10 Intemet is now commonplace. With television advertising, the public can often 
purchase the goods or services so-advertised over the telephone using a 
credit card fadiity. With the Intemet now well known as an electronic medium 
and powerful communications tool the seamless system (World Wide Web) 
linking information on different computers, the general public can readily 
15 access ttie Internet for a wide variety of purposes, including to order numerous 
consumer goods and/or services online. Once again, paymentforthese goods 
and/or services Is often by a credit card facility. Yet again, payment of goods 
at their point of sale by credit or debit cards (EFTPOS) is now common in the 
marketplace. 

20 A significant disadvantage of telecommunication purchasing is that it does not 
provide positive identification of individuals which is important for preventing 
unauthorized access to bank account or credit card details by a person wishing 
to purchase goods or services fraudulently. 

Possibly the most common method of positive identification before a sale is 
25 authorized over a telecommunication medium is the use of a code spedfic for 
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a particular account. These codes, often numeric but can be alphabetical or 
alphanumeric, are known as PIN numbers (Personal Identification Number) 
and are used In combination with the particular account number. Hovirever.as 
PIN and account numbers are not dependent on any cross-decking to ensure 
that they are being quoted over the telecommunication medium by the true 
proprietor of that PIN number and its assodated credit caixl or bank account, 
this type of secure transaction is not too difficult to circumvent 

In particular, in cun^ent systems utilizing such a magnetic strip credit or debit 
card, both the usei's account klentification and PIN number are stored on the 
card. While this data is encoded, the card can be easily duplicated and then 
used fraudulently in at least two ways: 

t 

1 . If the fraudulent user holds the cartl, a transaction can be completed, 
without a signature or PIN number, by several methods including over 
the telephone and the Internet using the card number, canJ name and 
expiry date. 

2. If the fraudulent user knows the PIN number, then a substitute carxl can 
be used In ATM's, EFTPOS terminals, etc. 

These fraudulent transactions create liability for both the issuing authority - 
which may be a bank building society or other financial institution - and the 
cardholder leading to subsequent disputes between the two parties. 

Positive klentification of an individual is also important for preventing 
unauthorized access to, or passage from, selected locations or facilities such 
as international destinations, bank vaults and other restricted areas which 
include secure buiWings, jails, airport terminals, etc. 
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However, this positive identification of an individual can lead to delays for 
travellers crossing international bonders as officials attempt to confirm the 
identity of the individual by, for example, manual interrogaUon, comparison of 
visual features with photographs in passports, or comparing names with lists 
of restricted individuals who may be banned from entering or leaving a 
particular country. 

One prior art solution proposed for these particular problems is to adopt 
methodologies relying on a physical attribute of the individual. Such 
methodologies, commonly referred to as biometric techniques, include 
fingerprint analysis, thennograms and DNA analysis. These methodologies 
are considered less vulnerable to mistaken identity. 

One such method includes comparing the biometric data on a card proffered 
by an individual to a previously created database of biometric data of 
authorized individuals. However, this system can still be foiled by individuals 
who have obtained a biometric card from its rightful owner. Alternatively, a 
fraudulent user of the card may partially duplicate the card, retaining any credit 
details but substituting his/her own biometric data for that of tiie rightful owner 
of tiie card. Further, the data obtained from ti^e individual is usually compared 
to a vast remote databank of such infonmation which is usually difficult atKl/or 
slow to locate and access. 

The presently available methods to overcome the above discussed 
disadvantages can convenientiy be summarized as possession of a passport, 
knowledge of a password, possession of a restricted article such as a pass 
key, and biometric techniques comparing data on a card by an individual to a 
remote databank of such information. 
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However, such security methods are readily circumvented and do not provide 
satisfactory methods for the positive and expedient Identification of an 
individual. 



It is thus a general object of the present invention to overcome, or at least 
ameliorate, one or more of the above problems and/or disadvantages. 

According to a first aspect of the present invention, there is provided a method 
for the positive identification of an individual, said method including: 

providing a unique description for said Individual, said unique description 
including biometric data of said individual; 

encrypting said unique description with an encryption key, said 
encryption key detemnined from said biometric data; 

providing identification means adapted for canriage with said indivklual, 
said identification means containing said unique description; 

providing a reading means to obtain verification biometric data from a 
person offering said identification means; 

determining an encryption key from said verification biometric data; 

using said encryption key from said verification biometric data to decrypt 
said biometric data included in said unique description; and 

comparing said verification biometric data with said thus decrypted 
biomebic data; 
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wherein identification of said person is deemed positive if said 
verification biometric data from said person is identical with said 
biometric data of said individual included in said unique description. 

Preferably, said encryption key is determined from only a part of said biometric 
data. 

Preferably, said biometric data is a fingerprint analysis. 

Preferably, said identification means is a card of the type capable of holding 
information in a machine-readable form. 

Optionally, after said reading means has obtained said verification biometric 
data from said person and said person has been initially positively identified, 
said verification biometric data is fransmitted to a remote databank for further 
comparison with biometric data held in said databank. 

In one embodiment of the present invention, sakl individual attends a point of 
issue for said identification means, such as a bank, where normal identification 
procedures for banking or credit card facilities must be met before said 
identification means is issued. 

Acconiing to a second aspect of the present invention, there is provided a 
device for use in a method for the pqsitive identification of an individual as 
hereinbefore described, said device including: 

a facility to obtain said verification biometric data finom a person oflering 
said identification means; 

reading means to read sakJ identification means; 
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decoding means to obtain biometric data from said identification means; 
and 



comparison means to compare said biometric data with said verification 
biometric data. 

Preferably, said fedlity is a fingerprint reader. 

5 Preferably, said reading means is a smart card reader assembly. 

* 

Preferably, said reading means is, or Is incorporated as part of, a computer, 
mobile telephone, EFTPOS terminal, ATM, or similar tenninal. 

. In those embodiments where said reading means is incorporated into a mobile 
telephone, said identification means is incorporated into the SIM card of the 
10 riiobile telephone. 

Optionally, said device will allow a maximum of three consecutive attempts to 
obtain said verification biometric data and compare vmUi said biometric data 
included witiiin said identification means. If positive identification does not 
occur witi^n those three attempts, ttie identification is deemed negative. 

15 In a tiiird aspect of the present invention, tiiere is provided a mettiod for a 
secure transfer of data over a telecommunication medium, said method 
including: 

prowling a transmission means to transmit said data firom a person 
desirous of undertaking a transaction to a party requiring to verify said 
20 data in order to validate said data before said transaction can be 

underteiken; and 
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providing a validation means to ensure that said person is authorized to 
undertake said transaction; 

wherein said transaction is authorized upon positive identification of said 
person determined by the method for positive identification as 
hereinbefore described. 

Preferably, said data is financial data of said person. 

Preferably, said transmission means Includes a terminal remote from said 
party whereby said person can supply said data to said party and which 
includes a cellular telephone or wireless data transmission link. 

Thus, according to a fourth aspect of the present invention, there is provided 
a terminal for use in a method for a secure transfer of data as hereinbefore 
described, said terminal including: 

transmission means to transmit identification details relevant to said 
person to said party; and 

a facility for said person to provide verification bioraetric data of said 
person with said identification details. 

Preferably, said ti-ansmission means further includes a credit or debit carxl slot 
assembly. 

Preferably, said facility includes: 

procuring means to obtain said verification biometric data from an 
individual offering said Identification means; 
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reading means to read said identification means; 

decoding means to obtain biometric data from said identification means; 

comparison means to compare said biometric data with said verification 
biometric data; and 

authentication means to authenticate said transferor data. 
Preferably, said procuring means is a fingerprint reader. 

Preferably, said reading means is a smart card slot assembly wherein said 
smart card contains said biometric data. 

More preferably, said facility ftirther includes a printout means to produce a 
hard copy for recording details of said transfer of data. 

In one embodiment of this aspect of the present Invention, said printout means 
is a printer either integral with, or separate firom, said fadlify. 

In another embodiment of this aspect of the present invention, said printout 
means is located within said smart card slot assembly. A print head 
assembly, which may be of a mechanical, themial, laser or inkjet type, prints 
a receipt when the receipt is entered (or withdrawn) from the slot assembly 
subsequent to the completion of the transfer of data and removal of the smart 
card from the slot assembly. A sensor of either optical or magnetic type 
detects the presence of the Inserted blank receipt and activates the printing 
process. 
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Preferably, said receipt is a single, duplicate or triplicate receipt in the form of 
a "tear off pad". 

More preferably, said receipt is a multiple copy receipt of comparable size to 
a credit or debit card. 

Most preferably, said receipt is in triplicate. 

A preferred embodiment of the present invention will now be described with 
reference to the accompanying drawings, wherein: 

FIG. 1 is a diagrammatic simplistic representation of a terminal which 
incorporates the present invention for the positive identification of an 
individual wishing to undertake a financial transaction over that temiinal; 

FIG. 2a is a top plan view schematic representation of the temiinal of 
the present invention; and 

FIG. 2b is a top edge view schematic representation of tiie temiinal of 
FIG. 2a. 

Witii reference to FIG. 1 , there is a centiial processing unit (1) connected to a 
cellular telecommunications network (2). A fingerprint reader (3) is connected 
to a smart card (4) issuing terminal (5) which can communicate with the 
network (2). It will be appreciated by those skilled in tiie art that each of these 
components are known and their IntisroonnecUon possible by any suitable 
means known in the art. A transaction temiinal (6), placed at a merchant's 
place of business, is also in communication witii tiie network (2). As illustrated • 
in FIGS. 2a & b, tiie terminal (6) includes a keyboard (7) to enter details of a 
transaction, a screen (8) to display tiie thus-entered details, a fingerprint 
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reader (9), a smart card reader assembly (10) and a printhead assembly (not 
illustrated) Incorporated within the card reader assembly (10). The operating 
software of the terminal (6) includes code to decrypt encrypted information 
read from the smart card (4). Once again, it will be appreciated by those 
skilled in the art that each component of the tenninal (6) is known and 
interconnecUon of the various components can be undertaken by known 
methods. 

An individual wishing to undertake a secure financial transaction using a 
machine-readable card first obtains a card which Incorporates encrypted 
biometric and financial data of that individual. This is achieved by presenting 
him- or herself to an institution such as a bank which issues machine-readable 
"smart" cards. As is usual when applying tor a credit or debit card at such an 
institution, the Individual must first provide positive identification which meets 
the requirements of the Institution before proceeding. Once assigned a smart 
card, biometric data, in partteular, fingerprint data, of the individual is taken at 
the institution using any suitable fingerprint reader known in the art. Although 
not essential, data can be taken from two fingerprints to minimize any 
subsequent false rejection that may occur when the present invention is in use 
at a merchant's place of business. The scanned image of the fingerprint(s), 
which is represented by a mathematical representation of the ridge pattern. Is 
then compressed and encrypted using any appropriate encryption algorithm 
known In the art of finandal transactions to ensure that it can only be read or 
compared by first decrypting the data. This encrypted biometric data and the 
financial details of the indivkJual are stored In the memory of the smart card. 

To undertake a secure purchase using this card (4). at the point of intended 
purchase, the card (4) Is placed in the reader assembly (10) of the temilnal (6) 
whereby the value of the transaction is enter by the merchant using the 
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keyboard (7). The value of the purchase is displayed on the visual display 
screen (8). The account details and encrypted biometric data are also read by 
the tenninal (6). The appropriate fingerprint of the individual is then taken at 
the fingerprint reader (9) of the temiinal (6) fifom which the encryption key is 
detemiined. The encrypted fingerprint data read from the card (4) is then 
decrypted using the encryption key just detemiined and the thus-decoded 
fingerprint data from the card (4) is compared with the fingerprint data obtained 
at the tenninal (6); if the thus-read fingerprint data is identical with that 
decoded fi-om the card (4). kJentificafion is deemed positive and the financial 
transaction proceeds. If the comparison is deemed negative, the customer re- 
presents the finger, or alternative finger rf two such fingerprints have been 
stored on the card (4), for a second scan whereby the comparison process 
described above is repeated. Although this procedure couW be repeated 
several times, in practice, it Is expected that tiie tenminal (6) will be set to allow 
only a maximum of three consecutive attempts to obtain the verification 
biometric data and compare witii the biometiic data included wittiin the smart 
card (4). If validation does not occur wittiin those three attempts, the 
identification is deenried negative. 

Upon a positive tiansaction, a receipt is inserted in the reader/printer slot (10) 
and the details of tiie tinansaction are recorded on tiie receipt Details of the 
transaction are also transmitted to ttie central proce^ing facilities (1) for 
record purposes. 

Alttiough in no way limiting, ttiis embodiment is particulariy suitable for point of 
sale purchasing of goods or services In all markets. The tenninal can be a 
self-contained stand-alone unit, or used in cooperation witii a palmtop, laptop 
or desktop computer or any otiier unit which includes a visual display unit. 
Furttier, ttie tenninal can utilise any convenient telecommunication networtc, 
and can be any combinatiori of cellular, satellite, microwave or hard wire 
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telephone or other communication networi; although, preferably, the temiinal 
will be a wireless communication device incorporating the functionarrty and 
convenience of a mdaile cellular telephone. 

Also, the secure transfer features of the present invention can be attached to 
existing ATM machines (Automatic Teller Machines) thus increasing the 
security of vwthdrawals therefrom. 

By using the present invention, a number of advantages are obtainable 
including: 

As verification of the identity of the person offering the identification 
means can be undertaken without accessing a remote database, this 
verification can be undertaken quickly and in significantly less time than 
the 20 to 30 seconds required by present means where a central 
database has to be accessed. 

Fraudulent use of a credit or debit card can be eliminated. Although a 
partial duplicate of smart card data can be made keeping the credit data, 
replacing bfometric data of the true owner of the card with that of the 
fraudulent user is insufficient to create a valid card as the enoyption key 
is different being based on the original biometric data. 

Thus the present invention, with its use of an encryption key based on 
biometric data of the person originally issued with a credit or debit card or other 
machine-readable klientification means, prevents card firaud or other fetse 
identification vwth a high level of security, ease of use and application. 

It will be appreciated that the above described embodiments are only 
exemplification of the various aspe(^ of the present invention and that 
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modifications and alterations can be made thereto without departing from the 
inventive concept as defined in the following claims. 
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CLAIMS 

1. A method for the positive identification of an individual, said method 
. including: 

providing a unique description for said individual, said unique 
description including biometric data of said individual; 

encrypting said unique description with an encryption key, said 
encryption key detenmined from said biometric data; 

providing identification means adapted for caniage with said 
individual, said identification means containing said unique 
descriptton; 

providing a reading means to obtain verification biometric data 
from a person offerii^ said identification means; 

determining an encryption key from said verification biometric 
data; 

using said encryption key firom said verification biometric data to 
decrypt said biometric data induded in said unique description; 
and 

comparing said verification biometric data witii said thus 
decrypted biometric data; 

wherein identification of said person is deemed positive if said 
verification biometric data from said person is identical with said 
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biometric data of said individuai induded in said unique 
description. 



2. A method as defined in Claim 1, wherein said encryption key is 
detemiined from only a part of said biometric data. 

3. A method as defined in Claim 1 or Claim 2, wherein said biometric data 
5 is a fingerprint analysis. 

4. A method as defined in any one of Claims 1 to 3, wherein said 
identification means ife a card of the type capable of holding infomiation 
in a machine-readable form. 

5. A method as defined in any one of Claims 1 to 4, wherein after said 
10 reading means has obtained said verification biometric data firom said 

person and person has been initially positively identified, said verification 
biometric data is transmitted to a remote databank for further 
comparison with biometric data held in said databank. 

6. A device for use in a method for the positive identification of an 
15 individual as defined in any one of Claims 1 to 5, said device including: 

i 

a facility to obtain said veriification biometric data from a person 
offering said identification means; 

reading means to read said identification means; 

decoding means to obtain biometric data from said identification 
20 means; and 
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comparison means to compare said biometric data with said 
verification biometric data. 

7. A device as defined in Claim 6, wherein said facility is a fingerprint 
reader. 

8. A device as defined in Claim 6 or Claim 7, wherein said reading means 
is a smart card reader assembly. 

9. A device as defined in any one of Claims 6 to 8, wherein said reading 
means is, or Is incorporated as part of, a computer, mobile telephone, 
EFTPOS terminal, ATM, or similar terminal. 

10. A device as defined in Claim 9 wherein said reading means is, or is 
incorporated as part of. a mobile telephone. 

11. A device as defined in Claim 10, wherein said identification means is 
incorporated into the SIM card of said mobile telephone. 

12. A method for a secure transfer of data over a telecommunication 
medium, said method induding: 

providing a transmission means to transmit said data firom a person 
desirous of undertaking a transaction to a party requiring to verify said 
data in order to validate said data before said transaction can be 
undertaken; and 

providing a validation means to ensure that said person is authorized to 
undertake said transa(^on; 
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wherein said transaction is autliorized upon positive identification of said 
person detennined by the method for positive identification as defined 
in any one of Claims 1 to 5. 

13. A method as defined in Claim 1 2, wherein said data is financial data of 
said person. 

14. A method as defined in aaim 1 2 or Claim 1 3, wherein said transmission 
means includes a temiinal remote from said party whereby said j;^rson 
can supply said data to said party and which includes a cellular 
telephone or vwreless data transmission link. 

15. A tennninai for use in a method for a secure transfer of data as defined 
in any one of Claims 12 to 14, said terminal including: 

transmission means to transmit identification details relevant to 
said person to said party; and 

a fadHty for said person to provide verification biometric data of 
said person with said identification details. 

16. A temriiinal as defined in Claim 15, v\rtierein said transmission means 
further includes a credit or debit card slot assembly. 

17. A tenninai as defined in Claim 15 or Clam 16. wherein said facility 
includes: 

procuring means to obtain said verification biometric data from an 
individual offering said ktentification means; 



wo 01/90962 



PCT/AU01/004S3 



18 

reading means to read said identification means; 

decoding means to obtain biometric data from said Identification 
means; 

comparison means to compare said biometric data with said 
verification biometric data; and 

autlientication means to authenticate said transfer of data. 

18. A temilna! as defined in Claim 17, wherein said procuring means is a 
fingerprint reader. 

19. A terminal as defined in Claim 17 or Claim 18, wherein said reading 
means is a slot assembly for a smart card wherein said smart carel 
contains said biometric data. 

20. A tennlnal as defined in any one of Claims 1 5 to 1 9, wherein said facility 
further Includes a printout means to produce a hard copy for recording 
details of said transfer of data. 

21. A temiinal as defined in Claim 20, wherein said printout means Is a 
printer either integrat with, or separate from, said facilrty . 

22. A temilnal as defined in Claim 20 or Claim 21 , wherein said printout 
means Is located within said slot assembly for said smart cart. 

23. A tenninal as defined in Claim 22, wherein said printout means prints a 
receipt when said receipt is entered Into said slot assembly subsequent 
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to the completion of the transfer of data and removal of said smart card 
from said slot assembly. 

24. A terminal as defined in Claim 22, wheran said printout means prints a 
receipt when said receipt is removed from said slot assembly 
subsequent to the completion of the transfer of data and removal of said 
smart card firom said slot assembly. 

25. A terminal as defined in Claim 23 or Claim 24, wherein said receipt is » 
single, duplicate or triplicate receipt in the form of a "tear ofP' pad. 

26. A terminal as defined in any one of Claims 23 to 25, wherein said receipt 
is of comparable size to a credit or debit card. 
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